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dn: cn=managerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LMPsubentry 
objectclass: nsRole 
objectclass: nsSifkpleRole 
objectclass: nsiimagedRole 
en: managerrole 

description? Manager Role within the Company 
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dir. uid=pointyhair, ou=people, dc=dom, dc=ain 
objectclass: top 

objectclass: person 

objectclass: inetorgperson 

uid: pointyhair 

gn: pointy 

.7 

sn: hair 

nsRoleDN: cn=managerrole, dc=dom, dc 
V description: Pointy Haired Manager 
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dn: cn=buildingl2people, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 

> 

objectclass: nsComplexRole 

objectclass: nsfilteredRole 

cn: buildingl2people 

nsRoleFilter: buildings 12 

description: People who work in building 12 
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dn: cn=megamanagerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LMPsubentry 
objectclass: nsRoi£ 
objectclass: nsComplexRole 
objectclass: nsNestedRole 
cn: megamanagerrole 

nsRoleDN: cn=managerrole, dc=dom, dc=ain 
\1sR0leDN: cn=networkmanager, dc=dom, dc=ain 
description: Super Manager Role within the Company 
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dn: cn=peonrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LMPsubentry 

' t 

objectclass: nsRole , j 
objectclass: nsCompleiHole 
objectclass: nsEnumeratedRole 

objectclass: groufofuniquenames 

i 

en: peonrole 

groupmember: uid=dboreham, ou=people, dc=dom, dc=ain 
groupmember: uid=merrells, ou=people, dc=dora, dc=ain 
groupmember: uid=claire, ou=people, dc=dom, dc=ain 
description: Lowest of the Low Roles within the Company 
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FOR EACH ENTRY WITHIN SCOPE, 
THE COMPETED ATTRIBUTE nsROLE 
IS CALCULATED. 

THE COMPETED ATTRIBUTE nsROLE 
IS EXAMfeiD TO SEE IF THE ROLE 
IS PRESENT. 



.THIS RESULTS IN A LIST OF 
ENTRIES THAT POSSESS THE ROLE. 



THE LIST IS THEREAFTER 
RETURNED TO A CLIENT. 



.i . 
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rdn of entry 
{null} 

{ country = us} 



f ORGANIZATION = 
\ MEGA CORP 



ORGANIZATIONAL 
UNITS = SALES; 
LOCATION = PALO 
ALTO 



distinguished 
name of entry 

{null} 



{COUNTRY = my 

{country = us} 
jtirganization =~\ 
\ mega corp j 

{country = us} 
r organization =~\ 

l_ MEGA CORP J 
ORGANIZATIONAL 
UNIT = SALES; 
LOCATION = 
PALO ALTO 
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DN: cn= messaging_server_cos, ou= people, o=acme 
objectclass: top 
objectclass: LMPSubentry 
objectclass: cosSuperDefmition 
objectclass: cosClassicDefinition ' 
cosTemplate 

DN: cn=MaiISfrverCOS, cn=LocalConfig, o=NetscapeRoot 
cosSpecifier: mailServiceClass 
cosAttribute: mailboxquota 
cosAttribute: maysendexternalmail 

v. 
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dn: cn= user, cn=MailServerC9S, cn=LocalConfig, o=NetscapeRoot 

objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 10000000 

maysendexternalmail: TRUE 

dn: en = guest, cn=MaiIServerCOS, cn=LocalConfig, o=NetscapeRoot 

objectclass:top ^ 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 1000000 

maysendexternalmail: FALSE 

V 

i 
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f 

dn: cn= messagingjfyrver_cos, ou= people, o= 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosPointerDefinition 
cosTeraplateDn|ou=people, o=acme 
cosAttribute: facsimilieTelephoneNumber default 
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dn: cn= messaging_server_cos, ou= people, 
objectclass: top 
objectclass: LMPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosIndirectDefinition 
cosIndirectSpecJfier: manager 
cosAttribute: accountingCode 
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